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Amendments to the Claims: 

This listing of claims will replace all prior versions, and listings, of claims in the application: 
Listing of the Claims: 

1. (Previously Presented) Method for the authentication of data communicated from a 
originator to a destination, 

wherein a keyed hashing technique is used, according to which data to be authenticated is 
concatenated with a private key and then processed with a cryptographic hash function and the 
data are transmitted together with the digest of the hash function from the originator to the 
destination, 

characterized in that 

the data comprises temporal validity information representing the temporal validity of the 

data; 

the originator receives an acknowledgement key from the destination, wherein the 
acknowledgement key includes a time stamp; and 

the originator verifies the acknowledgment key on the basis of the time stamp and the 
previously stored temporal validity information. 

2. (Original) Method according to claim 1, 
characterized in that 

the temporal validity information can be defined by the originator. 

3. (Previously Presented) Method according to claim 1, 
characterized in that 
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the data comprises random data which are unique for a time span defined by the temporal 
validity information. 

4. (Previously Presented) Method according to claim 1, 
characterized in that 

the data is a login key for a communication setup. 

5. (Previously Presented) Method for the authenticated transmission of messages, 
comprising the following communication setup steps: 

- generating a login key by a keyed-hashing method on the basis of random data, 
temporal validity information and a private key, 

- transmitting the login key from an originator to a destination, and 

- verifying the authenticity and the temporal validity of the login key on the basis of the 
keyed hashing digest on the destination side; and 

comprising the following acknowledgement steps: 

in case the verification of the authenticity and the temporal validity of the login key is 
positive, 

- generating an acknowledgment key by a keyed-hashing method on the basis of second 
random data and the private key, wherein the acknowledgement key includes a time stamp, 

- transmitting the acknowledgment key from the destination to the originator, and 

- verifying the acknowledgment key by the originator, including checking the 
acknowledgement key on the basis of the time stamp and the previously stored temporal validity 
information whether the acknowledgment key is still valid. 
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6.-7. (Canceled) 

8. (Previously Presented) Method according to claim 5, 
furthermore comprising the following message transmission steps: 
in case the verification of the acknowledgment key is positive, 

- extracting the second random data from the acknowledgment key, 

- generating a message by a keyed-hashing method on the basis of the second random 
data, message data and the private key, 

- transmitting the message from the originator to the destination, and 

- verifying the message by the destination. 

9. (Previously Presented) Method according to claim 8, 
characterized in that 

the message furthermore comprises a time stamp and when verifying the message it is 
checked on the basis of the time stamp of the message and the temporal validity information 
whether the message is still valid. 

10. (Previously Presented) A storage medium storing a software program product, 
characterized in that 

the software program product implements, when loaded into a computing device of a 
distributed system, a method according to claim 5. 
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11. (Previously Presented) Distributed system for communicating authenticated data from 
a originator to a destination, 

designed for a keyed hashing technique according to which data to be authenticated is 
concatenated with a private key and then processed with a cryptographic hash function, and the 
data are transmitted together with the digest of the hash function from the originator to the 
destination, 

characterized in that 

the data comprises temporal validity information representing the temporal validity of the 

data; 

the originator receives an acknowledgement key from the destination, wherein the 
acknowledgement key includes a time stamp; and 

the originator verifies the acknowledgment key on the basis of the time stamp and the 
previously stored temporal validity information. 

12. (Original) Distributed system according to claim 11, 
characterized in that 

the originator is designed to define the temporal validity information. 

13. (Previously Presented) Distributed system according to claim 1 1, 
characterized in that 

the data comprises random data which are unique for a time span defined by the temporal 
validity information. 



5 



00325888 



PATENT 

Appl. No. 09/728,800 

Attorney Docket No. 4501 17-02961 

14. (Previously Presented) Distributed system according to claim 1 1, 
characterized in that 

the data is a login key for a communication setup. 

15. (Previously Presented) Distributed system for the authenticated transmission of 
messages, comprising: 

- an originator designed to generate a login key by a keyed-hashing method on the basis 
of random data, temporal validity information and a private key, wherein the login key includes a 
keyed hashing digest; and 

- a network for transmitting the login key from the originator to a destination, wherein the 
destination is designed to verify the authenticity and the temporal validity of the login key on the 
basis of the keyed hashing digest; 

wherein the destination is designed to generate an acknowledgment key by a keyed- 
hashing method on the basis of second random data and the private key and to transmit the 
acknowledgment key to the originator in case the verification of the authenticity and the 
temporal validity of the login key is positive, and the acknowledgement key includes a time 
stamp, 

the originator is designed to verify the acknowledgment key, including checking on the 
basis of the time stamp and the previously stored temporal validity information whether the 
acknowledgment key is still valid. 

16. -17. (Canceled) 
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18. (Previously Presented) Distributed system according to claim 15, 
characterized in that 

the originator is designed to extract the second random data from the acknowledgment 
key in case the verification of the acknowledgment key is positive, generate a message by a 
keyed-hashing method on the basis of the second random data, message data and the private key, 
and transmit the message to the destination, and the destination is designed to verify the 
message. 

19. (Previously Presented) Distributed system according to claim 18, 
characterized in that 

the message furthermore comprises a time stamp and when verifying the message, the 
destination checks on the basis of the time stamp of the message and the temporal validity 
information whether the message is still valid. 

20. (Previously Presented) Method according to claim 1, 
characterized in that 

the data is a message. 

21. (Previously Presented) Distributed system according to claim 11, 
characterized in that 

the data is a message. 
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22. (New) Method according to claim 1, wherein the originator verifying the 
acknowledgment key on the basis of the time stamp and the previously stored temporal validity 
information includes 

calculating an absolute value difference between an acknowledgment universal time and 
a current time of the originator. 

23. (New) Method according to claim 22, further comprising 

comparing the absolute value difference to the temporal validity of the acknowledgment 

key. 

24. (New) Method according to claim 23, further comprising 

authenticating the acknowledgment key when the result of the comparison indicates the 
absolute value difference is less than the temporal validity of the acknowledgment key. 

25. (New) A method of authenticating transmission of messages, the method comprising: 
generating a login key using a keyed-hashing method based on first random data, 

temporal validity information and a private key; 

transmitting the login key from an originator to a destination side; 

verifying the authenticity and the temporal validity of the login key based on a keyed 
hashing digest on the destination side; 

generating an acknowledgment key using the keyed-hashing method based on second 
random data and the private key, 
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wherein the acknowledgement key includes a time stamp when the verification of the 
authenticity and the temporal validity of the login key is positive; 

transmitting the acknowledgment key from the destination side to the originator; 

verifying the acknowledgment key by the originator including checking the 
acknowledgement key based on the time stamp and the previously stored temporal validity 
information whether the acknowledgment key is still valid; and 

adjusting the time stamp and the originator upon receipt of the authentication messages 
based on a universal time field included in the messages. 
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